Staging Environment: Content and features may be unstable or change without notice.
Advisory details: github_osv / GHSA-6q3p-36f4-cwxv
Advisory ID github_osv/GHSA-6q3p-36f4-cwxv
Aliases CVE-2020-21122
Summary Server-Side Request Forgery in UReport UReport v2.2.9 contains a Server-Side Request Forgery (SSRF) in the designer page which allows attackers to detect intranet device ports.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (1)
CWE-918 Server-Side Request Forgery (SSRF)
System Score Found at
generic_textual HIGH
Reference id Reference type URL
https://github.com/youseries/ureport
https://github.com/youseries/ureport/issues/483
CVE-2020-21122 https://nvd.nist.gov/vuln/detail/CVE-2020-21122
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
There are no known vectors.

There are no SSVC decisions available.